Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: vY0+oPJ941/wFNpBHRF4fVvpFvhIpnAVOyaerZ47xvk=
Subject key identifier: A4:08:30:93:97:CF:4F:5B:FD:11:F3:E1:FE:0E:58:82:78:47:38:A0
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019D99D09DB5A48F916A2FCB4E892B697150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:18 +0000
Manifest this update: Fri 17 Apr 2026 05:01:18 +0000
Manifest next update: Sat 18 Apr 2026 05:01:18 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: /f23+ox89UA3iarDsJaYCNHek2wErnXppP6RIVos6hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:9d:b5:a4:8f:91:6a:2f:cb:4e:89:2b:69:71:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Apr 17 05:01:18 2026 GMT
Not After : Apr 18 05:01:18 2026 GMT
Subject: CN=a408309397cf4f5bfd11f3e1fe0e5882784738a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:76:7f:bc:81:8a:54:e3:4a:26:da:77:ba:
e8:0e:e0:21:c3:27:28:9c:29:2c:08:1b:5f:a7:f6:
16:f4:89:c3:62:81:0e:9c:56:f3:31:53:d3:e4:67:
6d:0d:b1:de:22:f2:60:60:31:f1:93:a1:1a:b1:48:
03:2c:c1:0b:25:6d:12:22:60:ba:5a:76:1e:a2:5a:
65:8a:ca:60:c4:39:36:c9:40:0c:54:22:a6:3c:49:
08:55:cb:f7:e5:e9:fb:2c:4f:da:bd:a5:3b:82:e6:
53:e5:74:55:86:25:22:10:74:13:5c:f3:1b:60:dc:
ac:b0:75:b8:96:8c:b1:90:90:86:22:74:33:c5:f4:
f0:dc:52:55:90:f0:fc:a0:55:94:09:e9:d3:9a:3b:
7d:d9:0c:32:8a:e8:c7:10:5e:ad:fd:ba:36:ea:4c:
76:5d:07:1a:49:e9:d5:7f:05:6b:d9:06:2c:8f:51:
ab:5f:41:2b:44:4f:18:b1:e8:f0:7a:32:c5:70:4b:
9b:db:1b:e2:73:70:47:d1:2c:8a:6b:fe:1c:72:56:
0f:e1:3c:f7:ff:d9:db:25:89:16:e7:e7:ad:b1:5c:
6f:5b:c1:89:3c:39:35:db:cb:f5:a7:4f:11:dc:e1:
4c:c2:06:e7:f5:44:e3:a6:d5:3e:d1:10:22:de:ef:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:30:93:97:CF:4F:5B:FD:11:F3:E1:FE:0E:58:82:78:47:38:A0
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:48:3d:76:93:f0:14:66:d3:c1:a9:ac:f5:51:01:60:f0:0d:
66:bf:de:e3:8c:27:f6:e1:2a:d1:d8:0d:e0:ba:af:c6:f2:ac:
77:4f:15:70:2a:98:c3:01:9a:1d:68:0d:8d:5c:dc:d0:32:e8:
f7:72:65:aa:00:32:21:53:9e:0b:12:89:f8:46:29:11:43:df:
e0:bc:cf:6d:53:95:95:2f:bc:6f:16:11:d2:9c:2e:8a:81:dc:
2a:95:70:97:d1:bd:73:e2:74:7c:b7:b8:8f:ec:d5:07:d9:a4:
d1:96:3d:e3:4e:e9:7d:48:17:4e:47:2e:2e:64:b4:a5:7d:67:
9d:4f:d6:ad:c4:c0:e4:94:cb:7f:ec:29:4e:c5:66:12:c7:6d:
c4:d7:82:43:a6:a8:e2:c5:18:11:cc:04:b7:3b:71:95:22:a0:
4f:db:85:f3:0c:5c:d7:d0:5e:65:59:ec:ab:70:96:9f:0b:a1:
f2:8b:9f:7e:07:97:a3:de:ce:75:35:9e:8e:50:4c:2c:a2:81:
a3:d8:1f:a1:5f:ad:97:36:a7:de:15:9e:fe:e1:13:fa:0f:16:
3f:66:15:ae:9d:31:ca:79:40:2f:68:89:35:96:de:fc:22:5c:
a6:11:03:ba:5e:e3:ee:98:af:ef:6f:e8:5e:c1:4b:12:cc:1b:
22:d0:f7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:54 2026 by rpki-client